Executive brief
Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule
Affected products
- Go github.com/projectcapsule/capsule
Junglewise Threat Intelligence
CVE-2024-39690: GO-2024-3077 - Capsule tenant owner with "patch namespace" permission can hijack system namespaces in github.com/projectcapsule/capsule
CVE-2024-39690 · Severity: low · CVSS 3.1 · Published 2024-08-22
Technologies: github.com/projectcapsule/capsule (Go). Vendors: Go.
Related threats
- Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, hostnameRegexHandler.OnUpdate in internal/we
- Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, the Tenant update validation in internal/web
- Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.7, ForbiddenListSpec.ExactMatch in pkg/api/forbidden_lis
- Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.6, charts/capsule/templates/configuration.yaml
- Project Capsule privilege escalation in TenantResource controller